Added httpCookies config

Added httpCookies config which covers setting HttpOnly flag, requiring
SSL for cookies and setting domain for cookies
https://www.owasp.org/index.php/HttpOnly